On 09/29/2014 03:13 PM, Michael Hamburg wrote: > What do you think of a KDF that amounts to H(minmax((Alice’s identity,Alice’s > message),(Bob’s identity,Bob’s message), shared secret)
For clarification, the above is missing a close-paren, and "minmax()" i
probably more simply described as sort()
so i think Mike is asking about:
H(sort((Alice's identity, Alice's message),
(Bob's identity, Bob's message)),
shared secret)
> It seems safer than the method you proposed, because it associates Alice’s
> identity to her message, but the wormhole attack you proposed worked because
> it confuses who sent which message.
--dkg
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Curves mailing list [email protected] https://moderncrypto.org/mailman/listinfo/curves
